CVE-2024-26951

A flaw was found in the Linux kernel's WireGuard component. A local user could trigger a use-after-free vulnerability when retrieving configuration data while network peers are concurrently removed. This flaw can lead to a Denial of Service (DoS) through a kernel crash or potentially enable local privilege escalation.

This vulnerability is rated as Low impact because WireGuard is not enabled or configured by default on Red Hat Enterprise Linux, and exploitation requires an active WireGuard interface with dynamic peer configuration. To trigger the race condition, a local user must time netlink status queries precisely during peer removal operations. Although the resulting memory corruption can cause a kernel crash, the specific operational setup and timing window significantly reduce practical risk in standard deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.